1565918d6cda9580d74d57d0f10f99e4

General

Target
1565918d6cda9580d74d57d0f10f99e4
Size 369KB
Sample220208-tbmfsaaabl
SHA256 eb8380806d9b6adeafaf0e81be1800cdfd61a09053b4f5fb8a935d6d4ad37e6c
MD5 1565918d6cda9580d74d57d0f10f99e4
SHA1 a96c858b263859c78b9fdb49ab407cea140dc1d3
SHA512 be3d67b466dede65b55645af0dfa6212051673208c6e14231e0cdaa61aacdf04f8d7f5911a7bb99bd4a6e399d5f9f2e14eed0e09858280766575a9c7fe3eceeb
SSDEEP 6144:O56dLjBFLyztOo0eYIjAmkB8lebi9JqGXdZ32mneM0laNUIbeURK46:YszuzN3jWB8f9JqQ2mnB0l4UMK46
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1565918d6cda9580d74d57d0f10f99e4

.dll 369KB

1565918d6cda9580d74d57d0f10f99e4

IMPHASH 79fb40281049052b3e354a6e444da473
SHA256 eb8380806d9b6adeafaf0e81be1800cdfd61a09053b4f5fb8a935d6d4ad37e6c
MD5 1565918d6cda9580d74d57d0f10f99e4
SHA1 a96c858b263859c78b9fdb49ab407cea140dc1d3
SHA512 be3d67b466dede65b55645af0dfa6212051673208c6e14231e0cdaa61aacdf04f8d7f5911a7bb99bd4a6e399d5f9f2e14eed0e09858280766575a9c7fe3eceeb
SSDEEP 6144:O56dLjBFLyztOo0eYIjAmkB8lebi9JqGXdZ32mneM0laNUIbeURK46:YszuzN3jWB8f9JqQ2mnB0l4UMK46
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

53287

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess GetNativeSystemInfo FreeLibrary HeapAlloc HeapFree GetTickCount VirtualFree GetProcessHeap IsBadReadPtr GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA VirtualProtect Sleep SetConsoleTextAttribute SetConsoleCursorPosition GetStdHandle SetConsoleCursorInfo SetEnvironmentVariableA HeapSize FlushFileBuffers GetSystemTimeAsFileTime HeapReAlloc GetConsoleMode GetNumberOfConsoleInputEvents PeekConsoleInputA ReadConsoleInputA SetConsoleMode MultiByteToWideChar WideCharToMultiByte EncodePointer DecodePointer CreateThread GetCurrentThreadId ExitThread LoadLibraryExW EnterCriticalSection LeaveCriticalSection IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA GetModuleHandleExW AreFileApisANSI WriteFile GetModuleFileNameW DeleteCriticalSection CreateFileW CloseHandle RtlUnwind ReadFile ReadConsoleW IsValidCodePage GetACP GetOEMCP GetCPInfo GetConsoleCP GetTimeZoneInformation UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW WriteConsoleW WaitForSingleObject GetExitCodeProcess CreateProcessA GetFileAttributesExW SetStdHandle SetFilePointerEx GetStringTypeW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetEndOfFile

user32

SendMessageA ShowWindow

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

1565918d6cda9580d74d57d0f10f99e4

kernel32

user32

winmm